Preventing the Microsoft Antimalware Service to start automatically

[balubeto]

Hi

 

To try to disable the MSE when Windows starts, I created this bat file:

 

 

@echo off
taskkill /im msseces.exe /f /t
taskkill /im MsMpEng.exe /f /t
net stop MsMpSvc
sc config "MsMpSvc" start= disabled

 

Next, I created a scheduled task

 

 

<?xml version="1.0" encoding="UTF-16"?>
<Task version="1.3" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
  <RegistrationInfo>
    <Date>2014-10-26T11:08:46.4219135</Date>
    <Author>Pippo\Balubeto</Author>
  </RegistrationInfo>
  <Triggers>
    <BootTrigger>
      <Enabled>true</Enabled>
    </BootTrigger>
  </Triggers>
  <Principals>
    <Principal id="Author">
      <UserId>S-1-5-18</UserId>
      <RunLevel>HighestAvailable</RunLevel>
    </Principal>
  </Principals>
  <Settings>
    <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
    <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>
    <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries>
    <AllowHardTerminate>true</AllowHardTerminate>
    <StartWhenAvailable>false</StartWhenAvailable>
    <RunOnlyIfNetworkAvailable>false</RunOnlyIfNetworkAvailable>
    <IdleSettings>
      <StopOnIdleEnd>true</StopOnIdleEnd>
      <RestartOnIdle>false</RestartOnIdle>
    </IdleSettings>
    <AllowStartOnDemand>true</AllowStartOnDemand>
    <Enabled>true</Enabled>
    <Hidden>false</Hidden>
    <RunOnlyIfIdle>false</RunOnlyIfIdle>
    <DisallowStartOnRemoteAppSession>false</DisallowStartOnRemoteAppSession>
    <UseUnifiedSchedulingEngine>false</UseUnifiedSchedulingEngine>
    <WakeToRun>false</WakeToRun>
    <ExecutionTimeLimit>P3D</ExecutionTimeLimit>
    <Priority>7</Priority>
  </Settings>
  <Actions Context="Author">
    <Exec>
      <Command>D:\Users\Public\Documents\balubeto\MSE_disabled.bat</Command>
    </Exec>
  </Actions>
</Task>

 

so that it goes running with the System's rights when the system starts up.

 

When, however, I rebooted the system, the MSE service is still active. How come?

 

Where did I do wrong?

 

Thanks

 

Bye

[GarthMJ]

Why do you want to do this? What problem are you trying to solve?